Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
bf624dfbbfcd3ea6d6b1d698c08988c3_JaffaCakes118.exe
Resource
win7-20240708-en
Target
bf624dfbbfcd3ea6d6b1d698c08988c3_JaffaCakes118
Size
3.1MB
MD5
bf624dfbbfcd3ea6d6b1d698c08988c3
SHA1
d056c663389e427d144e893a7703061fb4288021
SHA256
38794bf88f45667ac34be2c1c076adf4883c03e56db070bb52989c831182f160
SHA512
a90774d95b49f7ac61670923250294dee3e778c8036e43b1f93b5b748aab8bf7998927d2c6aed14c010f676adafb7ddb5a61e65bfabc9da4d4305fb4d21ef974
SSDEEP
49152:gL1BIulSvslJhFU+L8upCGyekHn4k/r6CcZAP1wA6TGaYie:gHlFU+YuJ4H4kj6Cz16TGzie
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE